barcelonaled[.]com[.]apk

Resubmissions

08/07/2026, 14:27

260708-rsh4ksgt9s7

08/07/2026, 13:54

260708-q7xpvaf18w7

Sharing

Copy URL Twitter E-mail

General

Target
barcelonaled.com.apk
Size 9.4MB
Sample260708-q7xpvaf18w
SHA256 a42997d66a44673c6e6575906a704ac86362f2ef9990f334319682ddf80b0b38
MD5 f07141b1cbca19a716b3e520cc3e2785
SHA1 58361eae1eb962c5df9ddd11a0f8dd7ae4b7c494
SHA512 46fee2ccf73cb012c097b73f1f1ef2dba2e3c87882d8c487a04fbef25e1112e580f135fc4f90bf2bb82437871487893956a2a4ab884387eb9f788a37dad1a137
SSDEEP 98304:+Z3QvZXlCcQr1iL2v2mhgHxe5ctrKgfG9SCWlJPwzKw/xtZbhxKtGvZQPLN7fZ:drNK7vBh+xe5cbfuQPwR7ZbhkGvZsLX
TLSH
T1B3A6D012F3054E32C4AD667978BA4744B336AD86DF8357431904B1B8ADB72E07F926CB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by call screening services to bind with the system. Allows apps to filter and manage incoming phone calls.	android.permission.BIND_SCREENING_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
barcelonaled.com.apk
unpack001/wuyaka

File Explorer

barcelonaled.com.apk

.apk 9.4MB
wuyaka

.apk 6.8MB

barcelonaled.com.apk

SHA256 a42997d66a44673c6e6575906a704ac86362f2ef9990f334319682ddf80b0b38
MD5 f07141b1cbca19a716b3e520cc3e2785
SHA1 58361eae1eb962c5df9ddd11a0f8dd7ae4b7c494
SHA512 46fee2ccf73cb012c097b73f1f1ef2dba2e3c87882d8c487a04fbef25e1112e580f135fc4f90bf2bb82437871487893956a2a4ab884387eb9f788a37dad1a137
SSDEEP 98304:+Z3QvZXlCcQr1iL2v2mhgHxe5ctrKgfG9SCWlJPwzKw/xtZbhxKtGvZQPLN7fZ:drNK7vBh+xe5cbfuQPwR7ZbhkGvZsLX
TLSH
T1B3A6D012F3054E32C4AD667978BA4744B336AD86DF8357431904B1B8ADB72E07F926CB
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

db386f4d9d709802d2d3eca46e9d57e6967725708d733970f5dca6b81117d55f

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

O=j4velin development

com.hahegayi.compress

wuyaka

SHA256 ad059cb96af0b1b96f1d759b7317f6882841efd7eda008374844a5dc67bb4580
MD5 f1aafee73754bb1e7f74a98797328722
SHA1 73abfe6c05d1a5e7a7a3f05cc2587b74a35db1c2
SHA512 522453587b6708548e33b1253f54445d93746173c2a7f1941f8633a45bd8ac81ed1e78af949c5de7d6cb68f4b95a801f332ea476738e88ac75d9c7a2a4fc567b
SSDEEP 98304:mP4PElDQhEUDJGhgqWZvh0no/KrZUVNv7H5hT3BrKQH:84cyEOMch0EVNvDnT3BF
TLSH
T14D669D67E3408C2EC4EB2237A87A4F09B3267D8D9B4397572904717CAC772EC3A566C5
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

92e233b76a007256387bb090b79488188e7873effaaf31164491d21c7634f59b

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Wikimedia Foundation,OU=Mobile,O=Wikimedia Foundation,L=San Francisco,ST=California,C=US

com.rorati.document

com.rorati.document.SEBdqQqKzBOo

com.rorati.document.zwXEAKBIiWeXIEaz

com.rorati.document.fmjzzbttrcgusgiu

android.intent.action.SEND android.intent.action.SENDTO

com.rorati.document.eZAtoOcDSFqPNpc

android.intent.action.MAIN

com.rorati.document.UJXPJjWJJhqDU

com.rorati.document.eIPXARluOtoi

com.rorati.document.lktsua0.Faeqxa0Activity

com.rorati.document.lktsua0.Rofoqb1Activity

com.rorati.document.lktsua0.Ezaahc2Activity

com.rorati.document.lktsua0.Otkwnd3Activity

com.rorati.document.lktsua0.Ejwebe4Activity

com.rorati.document.lktsua0.Wwnvtf5Activity

com.rorati.document.lktsua0.Csjpig6Activity

com.rorati.document.lktsua0.Ngddkh7Activity

com.rorati.document.lktsua0.Kyjjyi8Activity

com.rorati.document.qhvthb1.Vlgmza0Activity

com.rorati.document.qhvthb1.Cfrqvb1Activity

com.rorati.document.qhvthb1.Xhzyvc2Activity

com.rorati.document.qhvthb1.Xxzfqd3Activity

com.rorati.document.qhvthb1.Mdpbne4Activity

com.rorati.document.qhvthb1.Qjoqvf5Activity

com.rorati.document.qhvthb1.Yzwcmg6Activity

com.rorati.document.qhvthb1.Erxjfh7Activity

com.rorati.document.qhvthb1.Tdkshi8Activity

com.rorati.document.yxguhc2.Mocjqa0Activity

com.rorati.document.yxguhc2.Wexteb1Activity

com.rorati.document.yxguhc2.Wuyanc2Activity

com.rorati.document.yxguhc2.Lmmvfd3Activity

com.rorati.document.yxguhc2.Sdagre4Activity

com.rorati.document.yxguhc2.Izqhcf5Activity

com.rorati.document.yxguhc2.Zlrpdg6Activity

com.rorati.document.yxguhc2.Eukojh7Activity

com.rorati.document.yxguhc2.Nbenui8Activity

com.rorati.document.uudcqd3.Mnhzda0Activity

com.rorati.document.uudcqd3.Lrxsrb1Activity

com.rorati.document.uudcqd3.Mkcwdc2Activity

com.rorati.document.uudcqd3.Biilzd3Activity

com.rorati.document.uudcqd3.Ztbfie4Activity

com.rorati.document.uudcqd3.Peqwcf5Activity

com.rorati.document.uudcqd3.Lioxmg6Activity

com.rorati.document.uudcqd3.Yjrsph7Activity

com.rorati.document.uudcqd3.Qdmaii8Activity

com.rorati.document.mxjyze4.Wrsfca0Activity

com.rorati.document.mxjyze4.Fcczkb1Activity

com.rorati.document.mxjyze4.Xophcc2Activity

com.rorati.document.mxjyze4.Sxiajd3Activity

com.rorati.document.mxjyze4.Okhate4Activity

com.rorati.document.mxjyze4.Raqwxf5Activity

com.rorati.document.mxjyze4.Xupbqg6Activity

com.rorati.document.mxjyze4.Cmrxih7Activity

com.rorati.document.mxjyze4.Yvmfti8Activity

com.rorati.document.qayfsf5.Euxpoa0Activity

com.rorati.document.qayfsf5.Tjurwb1Activity

com.rorati.document.qayfsf5.Nlrrjc2Activity

com.rorati.document.qayfsf5.Zxawed3Activity

com.rorati.document.qayfsf5.Frtyze4Activity

com.rorati.document.qayfsf5.Dfrbif5Activity

com.rorati.document.qayfsf5.Mwkmwg6Activity

com.rorati.document.qayfsf5.Yubldh7Activity

com.rorati.document.qayfsf5.Yfkeri8Activity

com.rorati.document.aKivFBEH

android.provider.Telephony.SMS_RECEIVED android.provider.Telephony.SMS_DELIVER

com.rorati.document.BjakXdExpqmTRW

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON

com.rorati.document.rhrewjdtgvxprz

android.provider.Telephony.WAP_PUSH_DELIVER

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

barcelonaled.com.apk

Permissions

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

com.hahegayi.compress.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

barcelonaled.com.apk

File Signature issue

com.hahegayi.compress.xJJavvWre

com.hahegayi.compress.eoYhQmNZfdHaqb

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

wuyaka

File Signature issue

com.rorati.document.SEBdqQqKzBOo

com.rorati.document.zwXEAKBIiWeXIEaz

com.rorati.document.fmjzzbttrcgusgiu

com.rorati.document.eZAtoOcDSFqPNpc

com.rorati.document.UJXPJjWJJhqDU

com.rorati.document.eIPXARluOtoi

com.rorati.document.lktsua0.Faeqxa0Activity

com.rorati.document.lktsua0.Rofoqb1Activity

com.rorati.document.lktsua0.Ezaahc2Activity

com.rorati.document.lktsua0.Otkwnd3Activity

com.rorati.document.lktsua0.Ejwebe4Activity

com.rorati.document.lktsua0.Wwnvtf5Activity

com.rorati.document.lktsua0.Csjpig6Activity

com.rorati.document.lktsua0.Ngddkh7Activity

com.rorati.document.lktsua0.Kyjjyi8Activity

com.rorati.document.qhvthb1.Vlgmza0Activity

com.rorati.document.qhvthb1.Cfrqvb1Activity

com.rorati.document.qhvthb1.Xhzyvc2Activity

com.rorati.document.qhvthb1.Xxzfqd3Activity

com.rorati.document.qhvthb1.Mdpbne4Activity

com.rorati.document.qhvthb1.Qjoqvf5Activity

com.rorati.document.qhvthb1.Yzwcmg6Activity

com.rorati.document.qhvthb1.Erxjfh7Activity

com.rorati.document.qhvthb1.Tdkshi8Activity

com.rorati.document.yxguhc2.Mocjqa0Activity

com.rorati.document.yxguhc2.Wexteb1Activity

com.rorati.document.yxguhc2.Wuyanc2Activity

com.rorati.document.yxguhc2.Lmmvfd3Activity

com.rorati.document.yxguhc2.Sdagre4Activity

com.rorati.document.yxguhc2.Izqhcf5Activity

com.rorati.document.yxguhc2.Zlrpdg6Activity

com.rorati.document.yxguhc2.Eukojh7Activity

com.rorati.document.yxguhc2.Nbenui8Activity

com.rorati.document.uudcqd3.Mnhzda0Activity

com.rorati.document.uudcqd3.Lrxsrb1Activity

com.rorati.document.uudcqd3.Mkcwdc2Activity

com.rorati.document.uudcqd3.Biilzd3Activity

com.rorati.document.uudcqd3.Ztbfie4Activity

com.rorati.document.uudcqd3.Peqwcf5Activity

com.rorati.document.uudcqd3.Lioxmg6Activity

com.rorati.document.uudcqd3.Yjrsph7Activity

com.rorati.document.uudcqd3.Qdmaii8Activity

com.rorati.document.mxjyze4.Wrsfca0Activity

com.rorati.document.mxjyze4.Fcczkb1Activity

com.rorati.document.mxjyze4.Xophcc2Activity

com.rorati.document.mxjyze4.Sxiajd3Activity

com.rorati.document.mxjyze4.Okhate4Activity

com.rorati.document.mxjyze4.Raqwxf5Activity

com.rorati.document.mxjyze4.Xupbqg6Activity

com.rorati.document.mxjyze4.Cmrxih7Activity

com.rorati.document.mxjyze4.Yvmfti8Activity

com.rorati.document.qayfsf5.Euxpoa0Activity

com.rorati.document.qayfsf5.Tjurwb1Activity

com.rorati.document.qayfsf5.Nlrrjc2Activity

com.rorati.document.qayfsf5.Zxawed3Activity

com.rorati.document.qayfsf5.Frtyze4Activity

com.rorati.document.qayfsf5.Dfrbif5Activity

com.rorati.document.qayfsf5.Mwkmwg6Activity

com.rorati.document.qayfsf5.Yubldh7Activity

com.rorati.document.qayfsf5.Yfkeri8Activity

com.rorati.document.nqoxxSPWRG

com.rorati.document.lvp

com.rorati.document.HvgHNcLCkLK

com.rorati.document.uWfjsmdLir

com.rorati.document.aYKxrwWNeaIj

androidx.work.impl.background.systemalarm.SystemAlarmService